[SOLVED] Remote access is disabled in CT

[chencho]

I have 3 CT.

If i open in ssh terminal proxmox server and then pct enter, all works fine.

I can login in MySQL locally too.

But when i try to access over ssh outside proxmox server, it give me a connection refused. And in MySQL too (obviously, with % and grant permissions).

I have not firewall into CT; normally i use CSF Firewall&Config, but it's disabled

Proxmox firewall is disabled too.

My listen connections:

netstat -tln
Active Internet connections (only servers)
Proto Recv-Q Send-Q Local Address           Foreign Address         State
tcp        0      0 0.0.0.0:3306            0.0.0.0:*               LISTEN
tcp        0      0 0.0.0.0:7850            0.0.0.0:*               LISTEN
tcp        0      0 127.0.0.53:53           0.0.0.0:*               LISTEN
tcp        0      0 127.0.0.1:25            0.0.0.0:*               LISTEN
tcp6       0      0 :::33060                :::*                    LISTEN
tcp6       0      0 :::7850                 :::*                    LISTEN
tcp6       0      0 ::1:25                  :::*                    LISTEN

sudo ufw status
Status: inactive

csf -x
csf and lfd have been disabled, use 'csf -e' to enable

It's like each CT have a firewall enabled, but i cannot find it!

 

[oguz]

hi,

what's your networking setup like? does each CT have their own public IP?
if not, then you will have to portforward.

 

[chencho]

Yes, all of them have public IP and connectivity.

Reading the config file, i see firewall is set to 1 in the network.

I can stop the ct, edit the config, but now the ct is not up. But i think is related to another problem:

https://forum.proxmox.com/threads/rpool-dont-mount-after-reboot-random-times.57942/

 

[Stoiko Ivanov]

I don't see a running ssh server in your `ss -tlnp` output?
does the container have ssh installed and configured to start up?

 

[chencho]

Yes, it's on port 7850

 

[Stoiko Ivanov]

hm - then check the logs - or in that case it's more likely that you will see something with tcpdump (on port 7850)
* try dumping in the container and on the bridge

I hope this helps

 

[chencho]

Something was wrong to my server.

I reinstall it from scratch and now i can access to my CT from outside.

 

[Stoiko Ivanov]

Glad this worked out!